Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File:                     3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier:          CimAPiyeLEE8QNl30zqoKJ8ZqlQa6KTyWBOhRN6Wmz4=
Subject key identifier:   41:E9:C1:24:40:7E:87:CF:80:DB:BB:85:1F:E4:A2:83:A3:9F:77:B9
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer:       /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial:       0194BD17FD9333D39E74BB60B2AA08D69E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 16:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:53 +0000
Files and hashes:         1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: 6JU3GGSAlfPcZi9IOjZqgs9GDhSIi6ek0J/sc79zxHE=)
                          2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
                          3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
                          4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:fd:93:33:d3:9e:74:bb:60:b2:aa:08:d6:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
        Validity
            Not Before: Jan 31 16:00:53 2025 GMT
            Not After : Feb  1 16:00:53 2025 GMT
        Subject: CN=41e9c124407e87cf80dbbb851fe4a283a39f77b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:59:e9:d5:df:ca:80:10:1b:ac:7e:a4:a1:
                    f5:85:d5:08:6c:dc:c4:03:db:91:cb:eb:e4:3b:3f:
                    9d:50:89:22:b5:22:e5:f0:f4:b7:ef:ff:70:5e:86:
                    17:f3:6a:b8:83:29:c7:3c:80:16:70:e8:df:10:74:
                    e8:85:88:d5:e6:ec:95:fd:0f:cd:29:6f:57:08:a1:
                    24:7a:9b:00:59:1c:82:6a:11:0a:62:3e:41:25:c4:
                    51:72:fe:75:f0:cd:67:77:52:ec:cb:89:fe:9e:e0:
                    92:df:c6:36:7e:b1:8d:2c:15:af:97:b1:e1:b4:ba:
                    5c:0e:7c:41:b7:98:11:0f:41:6c:b4:b7:b1:8c:65:
                    db:00:85:40:96:d8:0f:f3:4b:eb:0a:d5:bc:27:81:
                    1f:cb:cb:00:a6:df:3a:69:63:0e:b6:07:52:d0:93:
                    21:57:ff:7b:b9:66:ba:18:9f:cb:eb:ec:3e:22:6c:
                    47:ec:c4:a5:01:6b:fe:16:a2:55:03:88:39:76:c8:
                    90:92:21:ea:f7:32:69:f9:ee:88:47:86:bd:22:d0:
                    1a:9b:fe:47:b2:25:29:12:b1:d0:de:6b:07:4c:b2:
                    7f:62:83:1a:2d:33:6e:95:a2:f6:c9:3d:2f:6d:eb:
                    95:55:b9:6d:f6:2d:b0:2c:3e:60:46:ea:c6:82:ae:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E9:C1:24:40:7E:87:CF:80:DB:BB:85:1F:E4:A2:83:A3:9F:77:B9
            X509v3 Authority Key Identifier:
                keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:18:14:20:7e:cd:5f:5e:65:ee:e2:13:3a:9f:90:a1:60:5b:
         ac:62:82:53:9b:c9:27:37:af:e8:e6:b0:76:bd:95:f0:92:8a:
         cd:41:14:48:44:cd:6c:61:7e:ba:d3:37:05:23:32:a2:c7:16:
         cb:3e:eb:29:2b:0e:bc:91:db:ba:ce:dd:d6:28:60:09:84:75:
         e4:ea:6c:b9:40:9a:d1:71:80:af:ce:06:4c:fa:51:65:49:f2:
         54:81:37:88:e4:de:72:65:d1:5f:a2:bb:1e:d1:be:d9:a0:83:
         74:a4:a5:56:d4:13:b5:17:f3:ce:17:51:7c:7b:f1:79:42:89:
         44:c0:ee:f1:0d:18:98:39:15:e6:b7:8c:6b:70:36:37:7f:29:
         7a:c9:be:e7:27:27:1f:bd:5d:f2:17:11:90:ac:46:8a:7a:89:
         8c:df:85:dd:cd:f0:ef:3d:73:07:e8:80:0a:54:e7:e1:f8:55:
         d2:9e:c0:ba:48:b7:65:99:9c:78:7e:36:8b:61:e5:41:fe:ae:
         48:08:8e:fb:ba:df:44:45:31:2b:f4:7d:5c:b0:4f:40:f4:fb:
         36:73:76:1c:31:94:35:71:0a:c9:b3:08:4d:19:3e:ab:e4:42:
         ab:0a:04:68:b2:c3:c4:44:ec:29:8d:2a:3e:de:23:9a:5a:63:
         ef:b5:ee:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/2TM9OedLtgsqoI1p4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx
OTBjNTMwHhcNMjUwMTMxMTYwMDUzWhcNMjUwMjAxMTYwMDUzWjAzMTEwLwYDVQQD
Eyg0MWU5YzEyNDQwN2U4N2NmODBkYmJiODUxZmU0YTI4M2EzOWY3N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9hZ6dXfyoAQG6x+pKH1hdUIbNzE
A9uRy+vkOz+dUIkitSLl8PS37/9wXoYX82q4gynHPIAWcOjfEHTohYjV5uyV/Q/N
KW9XCKEkepsAWRyCahEKYj5BJcRRcv518M1nd1Lsy4n+nuCS38Y2frGNLBWvl7Hh
tLpcDnxBt5gRD0FstLexjGXbAIVAltgP80vrCtW8J4Efy8sApt86aWMOtgdS0JMh
V/97uWa6GJ/L6+w+ImxH7MSlAWv+FqJVA4g5dsiQkiHq9zJp+e6IR4a9ItAam/5H
siUpErHQ3msHTLJ/YoMaLTNulaL2yT0vbeuVVblt9i2wLD5gRurGgq5dbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHpwSRAfofPgNu7hR/kooOjn3e5MB8GA1UdIwQY
MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt
NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5
LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRgUIH7N
X15l7uITOp+QoWBbrGKCU5vJJzev6Oawdr2V8JKKzUEUSETNbGF+utM3BSMyoscW
yz7rKSsOvJHbus7d1ihgCYR15OpsuUCa0XGAr84GTPpRZUnyVIE3iOTecmXRX6K7
HtG+2aCDdKSlVtQTtRfzzhdRfHvxeUKJRMDu8Q0YmDkV5reMa3A2N38pesm+5ycn
H71d8hcRkKxGinqJjN+F3c3w7z1zB+iAClTn4fhV0p7Auki3ZZmceH42i2HlQf6u
SAiO+7rfREUxK/R9XLBPQPT7NnN2HDGUNXEKybMITRk+q+RCqwoEaLLDxETsKY0q
Pt4jmlpj77XuAQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:18 2025 by rpki-client